Chameleon Malware Poses as CRM App

Researchers at ThreatFabric warn of an active phishing campaign distributing the Chameleon Android malware by impersonating CRM applications and targeting users in Canada and Europe; attackers use fake login pages and social engineering to trick victims into reinstalling an app that installs Chameleon (bypassing Android 13+ AccessibilityService restrictions) and then harvests credentials and keylogs, posing a significant risk to business banking accounts.